mdpuma

how to trim inside vm

https://forum.proxmox.com/threads/thin-provisioned-windows-vms-use-full-capacity-in-proxmox-ceph-after-migration.83924/ https://learn.microsoft.com/en-us/sysinternals/downloads/sdelete

creating cloudbase cloudinit Windows templates

• install windows
• install virtio-win

mdpuma

#!/bin/bash

iptables -N DROP_OUT_HTTP 
iptables -A DROP_OUT_HTTP -j LOG --log-prefix "DROP_OUT_HTTP: " --log-uid
iptables -A DROP_OUT_HTTP -p tcp --syn -j REJECT --reject-with tcp-reset

iptables -N OUT_HTTP
#iptables -A OUT_HTTP -p tcp -m owner --uid-owner tucanorate -j DROP_OUT_HTTP
iptables -A OUT_HTTP -p tcp -m string --string "HTTP" --algo kmp --to 100 -j NFLOG --nflog-group 5
iptables -A OUT_HTTP -p tcp --syn -j LOG --log-prefix "OUT_HTTP: " --log-uid

mdpuma

#!/bin/bash -e

action=$1
argument=$2

IPS="1.1.1.1/24 2.2.2.2/24"

case "$action" in
	listips)
		#for i in $IPS; do

mdpuma

#!/bin/sh

# VLANID is 10 | 0xa
# VLANID is 20 | 0x14
# VLANID is 3342 | 0x0d0e
# VLANID is 3340 | 0x0d0c
# https://www.binaryhexconverter.com/hex-to-binary-converter
# https://www.tcpdump.org/manpages/pcap-filter.7.html

mdpuma

bgp_ip=127.0.0.1 ip=0.0.0.0/0

mdpuma

class VSOLOLT < Oxidized::Model

  prompt /^([\w.@()-]+[#>]\s?)$/
  comment  '! '

  cmd :all do |cfg|
    cfg.gsub! /^% Invalid input detected at '\^' marker\.$|^\s+\^$/, ''
    cfg.cut_both
  end

mdpuma

Q: Wifi cant connect
A: Disable in Wifi Options -> Regulatory -> Enable 802.11d


2x rdp client
https://kb.parallels.com/en/124103

mdpuma

/interface bridge filter
add action=drop chain=output comment="DROP RSTP BPDU" dst-mac-address=\
    01:80:C2:00:00:00/FF:FF:FF:FF:FF:FF out-interface=ether1
add action=drop chain=output comment="DROP RSTP BPDU" dst-mac-address=\
    01:80:C2:00:00:00/FF:FF:FF:FF:FF:FF out-interface=ether10
# no interface
add action=drop chain=output comment="DROP RSTP BPDU" dst-mac-address=\
    01:80:C2:00:00:00/FF:FF:FF:FF:FF:FF out-interface=*45

mdpuma

DHCP client port 68 
DHCP server port 67

client > server discover broadcast
client > server request unicast
server > client reply ACK unicast

mdpuma

crontab -e 

*/5 * * * * /sbin/iptables -D INPUT -j cP-Firewall-1-INPUT 2> /dev/null && echo "cP-Firewall-1-INPUT Removed"